Change password page doesn't limit the number of attempts.
vulners.com/securityvulns/securityvulns:doc:6949